I did this for someone recently too. It's was a mess, with a bunch of 2 factor authentication nonsense and timeouts to add to the drama.

And if that wasn't enough, this was all complicated by a broken screen on one of the devices. Turning on reachability helped since the smash was at the top of the screen.